Azure Reliability Skill for Claude: Check and Fix App Resilience

azure-reliability checks your Azure Functions and App Service apps for single points of failure, then fixes them step by step with your approval.

Installs: 305.8K; on skills.sh
Stars: 1.6K; on GitHub
Files: 12; besides SKILL.md
Updated: Oct 2026; last repo commit

azure-reliability scans your deployed Azure Functions and App Service resources and shows a four-row checklist: zone redundancy for compute, zone-redundant storage, health probes and multi-region failover. If you say yes, it fixes the red items, either with az commands on live resources or by patching your Bicep or Terraform files.

It asks before every change, runs the quick wins first, and asks again before the slow storage migration and before any multi-region setup. It needs az login (Reader to assess, Contributor to change). Azure Container Apps support is marked as planned, not shipped.

Good for

Developers running Azure Functions or App Service who ask "is my app zone redundant?"
Platform engineers who want a reliability checklist and Bicep or Terraform patches
Teams planning multi-region failover with Azure Front Door

Install azure-reliability

Claude Code

Copy this prompt.

Install the azure-reliability skill in Claude Code. Run this command:

/plugin install azure@claude-plugins-official

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js 18+, Azure CLI signed in with az login.

The plugin installs the Azure skills together with the Azure MCP Server that these skills call. The README lists Node.js 18+ (npx starts the MCP servers) and the Azure CLI signed in with az login as prerequisites.

From the project README. Source.

What's in the skill

When it loads

Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: "assess reliability", "check reliability", "zone redundant", "multi-region failover", "high availability", "disaster recovery", "single points of failure", "reliability posture", "resiliency".

Sections in SKILL.md

Quick Reference
When to Use This Skill
Prerequisites
MCP Tools
Assessment Workflow
Phase 1: Discover Resources
Phase 2: Assess Reliability
Phase 3: Generate Reliability Checklist
Configuration Workflow
Step 1: Present Fix Plan + Choose Path
Path A: Fix Now (CLI)
Path B: Patch IaC
Step 2 (both paths): Re-Assess
Step 3 (both paths): Multi-region follow-up — ASK and WAIT
Priority Classification
Error Handling

Key facts

Author: Microsoft (metadata.author in SKILL.md)
License: MIT
Installs on skills.sh: 305,841 as of 2026-11-02
GitHub stars: 1,609 for the whole microsoft/azure-skills repo
skills.sh audits: Gen Agent Trust Hub pass, Socket pass, Snyk warn
What is inside: 12 files besides SKILL.md (12 in references/)
Needs: Azure CLI signed in with az login; Reader role to assess, Contributor to change; the Azure Resource Graph extension (az extension add --name resource-graph)
Part of plugin: azure
Last commit to the repo: 2026-10-30

What it includes

Finds Functions, App Service and storage in your scope
Queries Azure Resource Graph with `az graph query`, always limited to the resource group, subscription or app you name.
Try: “Check the reliability of resource group rg-web-prod.”
Network · Discover resources
Platform checks, then a deep dive per service
Checks zone redundancy, storage redundancy, multi-region and global load balancers, and health probes. Container Apps are listed as not assessed.
Network · Assess reliability
Four rows with ON, PARTIAL or OFF status
Zone redundancy for compute, zone-redundant storage, health probes and multi-region failover. No numeric scores or grades.
Read · Reliability checklist
Applies fixes to live resources after you confirm
Zone redundancy and health probes first. SKILL.md warns that later azd up or terraform apply runs may overwrite CLI-only changes.
Try: “Make my app service plan zone redundant.”
Runs code · Fix now (az CLI)
Edits your infrastructure files, then deploys
Patches quick wins first, confirms once, then runs azd up, az deployment group create or terraform apply itself.
Runs code · Patch IaC (Bicep or Terraform)
Moves storage to ZRS after a separate yes
Starts `az storage account migration start`, which SKILL.md says can take up to 72 hours, and polls until it finishes.
Runs code · Storage migration
Second region plus Azure Front Door, only on request
Offered only when the core single-region items are ON. SKILL.md estimates about 2x compute and about $35 a month base for Front Door.
Runs code · Multi-region follow-up
Re-runs the checklist after changes
Shows what changed since the first run.
Read · Re-assess

From the official docs

Permissions

Medium risk

Approved fixes change live Azure resources and can run deployments. Start with Reader access to see the checklist before you grant Contributor.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

Approved fixes change live Azure resources
It can enable zone redundancy, change storage replication and deploy IaC. Read each proposed change and cost note before you say yes.
It runs deployments for you
After one confirmation it runs azd up, az deployment group create or terraform apply. Check the target subscription and resource group first.
Storage migration is slow and costs more
SKILL.md says it can take up to 72 hours and adds a small ongoing cost. Say "later" if you are not ready.
Multi-region adds real cost
SKILL.md estimates about 2x compute plus Front Door. It only offers this after the core items are ON.

Technical details

Talks to	Azure Resource Manager and Azure Resource Graph
Scopes	Runs az, azd or terraform commands as your signed-in Azure identity Reader access to assess, Contributor access to change Edits Bicep or Terraform files in your project

Questions

What does the azure-reliability skill do?

It checks Azure Functions and App Service apps for zone redundancy, zone-redundant storage, health probes and multi-region failover, then helps you fix the gaps. It works from a four-row checklist, not a score.

How do I install it?

Use the install box at the top of this page, which has tabs for Claude Code, the Claude app and Codex. The install box uses the Azure plugin, and you must be signed in with az login.

Will it change my Azure resources without asking?

No. SKILL.md says to always confirm before changes, show cost effects and destructive steps, and wait for a yes before storage migration or multi-region work.

What Azure permissions does it need?

Reader access to assess and Contributor access to make changes. It also uses the Azure Resource Graph extension for az graph query.

Which services does it cover?

Azure Functions and Azure App Service only. Azure Container Apps support is marked as planned for a later version, and the skill will not make up commands for it.

Can it deploy for me?

Yes, after you confirm once. It can run azd up, az deployment group create or terraform apply and stream the output.

Is it safe?

Assessment uses queries, and SKILL.md says to confirm before any change. Approved fixes change live Azure resources, can run deployments and can add cost. Start with Reader access to see the checklist.

Information

updated Nov 2, 2026

Repository: microsoft/azure-skills
Folder: skills/azure-reliability

microsoft/azure-skills skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 3

microsoft/azure-skills README · github.com
azure-reliability SKILL.md · github.com
skills.sh listing and audits · skills.sh